Opera 7.x up to 7.54, and possibly other versions, allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the "window injection" vulnerability.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade mozilla+ipv6Upgrade linux-phoenixUpgrade operaUpgrade de-linux-netscapeUpgrade linux-mozilla-develUpgrade linux-mozillafirebirdUpgrade mozilla-gtk1Upgrade el-linux-mozillafirebirdUpgrade zhTW-linux-mozillafirebirdUpgrade firefoxUpgrade kdelibsUpgrade ru-linux-mozillafirebirdUpgrade opera-develUpgrade ja-linux-mozillafirebird-gtk1Upgrade pt_BR-netscape7Upgrade kdebaseUpgrade mozilla-gtk2Upgrade linux-mozillaUpgrade netscape7Upgrade mozilla-thunderbirdUpgrade de-linux-mozillafirebirdUpgrade linux-operaUpgrade ja-netscape7Upgrade mozillaUpgrade fr-linux-netscapeUpgrade mozilla-firebirdUpgrade mozilla-gtkUpgrade ja-mozillafirebird-gtk2Upgrade de-netscape7Upgrade phoenixUpgrade ja-linux-netscapeUpgrade fr-netscape7Upgrade mozilla-embeddedUpgrade linux-netscapeUpgrade zhCN-linux-mozillafirebird | Dec 10, 2025 | Jan 24, 2005 |
| Gentoo Linux | — | Upgrade www-client/opera. | Oct 30, 2017 | Jan 10, 2005 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub